Initial implementation of the Mac Bootstrap Sandbox.

sandbox/mac/policy.cc

Index: sandbox/mac/policy.cc
diff --git a/sandbox/mac/policy.cc b/sandbox/mac/policy.cc
new file mode 100644
index 0000000000000000000000000000000000000000..5493c28e4f292543cbd9df8786d05bf86e1c13ee
--- /dev/null
+++ b/sandbox/mac/policy.cc
@@ -0,0 +1,44 @@
+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "sandbox/mac/policy.h"
+
+namespace sandbox {
+
+Rule::Rule()
+    : result(POLICY_DECISION_INVALID),
+      substitute_port(MACH_PORT_NULL) {
+}
+
+Rule::Rule(PolicyDecision result)
+    : result(result),
+      substitute_port(MACH_PORT_NULL) {
+}
+
+Rule::Rule(mach_port_t override_port)
+    : result(POLICY_SUBSTITUTE_PORT),
+      substitute_port(override_port) {
+}
+
+bool IsPolicyValid(const BootstrapSandboxPolicy& policy) {
+  for (BootstrapSandboxPolicy::const_iterator it = policy.begin();
+       it != policy.end();
+       ++it) {
+    const Rule& rule = it->second;
+    if (!(rule.result > POLICY_DECISION_INVALID &&
+          rule.result < POLICY_DECISION_LAST)) {
+      return false;
+    }
+    if (rule.result == POLICY_SUBSTITUTE_PORT) {
+      if (rule.substitute_port == MACH_PORT_NULL)
+        return false;
+    } else {
+      if (rule.substitute_port != MACH_PORT_NULL)
+        return false;
+    }
+  }
+  return true;
+}
+
+}  // namespace sandbox